marcopan
c2f9b03973
refactor: remove legacy workspace runtime branches
2026-08-10 21:28:08 +02:00
marcopan
f102629cee
refactor: remove workspace revision state
2026-08-10 20:54:40 +02:00
marcopan
512b0261b1
refactor: make workspace descriptors schema v3 only
2026-08-10 20:21:20 +02:00
marcopan
5d016ce635
docs: revise schema-v3-only cleanup plan
2026-08-10 19:50:24 +02:00
marcopan
ce90b4410d
docs: add P2 host preprocessing plan
2026-08-10 19:04:51 +02:00
marcopan
16ee92c8f9
docs: design P2-P6 workspace preprocessing
2026-08-10 18:59:31 +02:00
marcopan
2e95101aa3
docs: record P1 manual acceptance
2026-08-10 18:47:02 +02:00
marcopan
6202c07e2e
docs: record complete P1 evidence
2026-08-10 17:40:36 +02:00
marcopan
c7338969d7
fix: bind complete P1 manual dist graph and snapshot identity
...
prepare records an immutable manifest of every regular backend/dist file
(path/size/sha256/dev/ino) in the owned root and binds its record identity
in ownership; serve revalidates record and every file before spawn, passes
the manifest to the child on fd 4, and the immutable preload hash-verifies
all files at startup and serves only cached verified bytes for any import
below backend/dist, so imported dependency replacement is refused before
RUNNING or never executes. The render command validates the commit
snapshot.json manifest, binds snapshot bytes to the manifest digest and the
installed Git blob, and passes the expected digest to the renderer, which
revalidates head/files digest with bounded no-follow reads and renders only
verified bytes with lease release on refusal.
2026-08-10 17:36:24 +02:00
marcopan
1c11d61f78
docs: correct final lifecycle test count
2026-08-10 00:43:58 +02:00
marcopan
72406da88b
docs: record final report hashes
2026-08-10 00:43:44 +02:00
marcopan
9220579acd
docs: record final P1 integration evidence
2026-08-10 00:43:12 +02:00
marcopan
e97f335b88
fix: bind manual production graph and snapshots
2026-08-10 00:38:46 +02:00
marcopan
c10857405a
fix: reject Git diff driver helpers
2026-08-10 00:30:06 +02:00
marcopan
e042692cae
docs: record final P1 startup and Git evidence
2026-08-10 00:05:58 +02:00
marcopan
d14a99abe7
fix: seal P1 acceptance startup and raw Git state
2026-08-10 00:02:29 +02:00
marcopan
87ee55a35f
docs: record final P1 acceptance evidence
2026-08-09 23:39:07 +02:00
marcopan
0cfe5c7c9a
fix: bind P1 acceptance evidence to reviewed runtime
2026-08-09 23:36:36 +02:00
marcopan
96362929d7
fix: harden P1 manual acceptance audit gates
2026-08-09 23:32:42 +02:00
marcopan
7d8fb065b5
fix: seal P1 acceptance process boundaries
2026-08-09 22:51:56 +02:00
marcopan
a3129b8b81
fix: anchor P1 manual extraction and scans
2026-08-09 22:43:44 +02:00
marcopan
bd1f4083e9
fix: use production entrypoint for P1 manual serve
2026-08-09 22:33:18 +02:00
marcopan
e9755c6feb
fix: serialize P1 manual lifecycle root
2026-08-09 22:21:49 +02:00
marcopan
c1ca814440
fix: close P1 acceptance audit gaps
2026-08-09 22:16:37 +02:00
marcopan
6b2fd71018
fix: serialize P1 manual server ownership
2026-08-09 21:51:45 +02:00
marcopan
3fe5a7b5e9
fix: complete P1 integration audit trail
2026-08-09 21:45:52 +02:00
marcopan
1986716aac
fix: harden P1 manual acceptance guards
2026-08-09 21:27:04 +02:00
marcopan
c24ffcd238
fix: reject modal P1 scope claims
2026-08-09 21:21:40 +02:00
marcopan
3583659600
fix: harden P1 integration evidence
2026-08-09 21:14:45 +02:00
marcopan
74ddb86d13
test: add P1 manual configuration walkthrough
2026-08-09 21:12:08 +02:00
marcopan
d27be56d5c
fix: reject unsafe evidence documentation claims
2026-08-09 21:08:43 +02:00
marcopan
4d6e91526d
test: prove P1 configuration process end to end
2026-08-09 20:51:20 +02:00
marcopan
4b329b4b2c
test: expect canonical secret binding paths
2026-08-09 20:50:53 +02:00
marcopan
d7264b843d
fix: complete evidence documentation contract
2026-08-09 20:47:30 +02:00
marcopan
d77c08884b
test: use canonical workspace API fixtures
2026-08-09 20:44:35 +02:00
marcopan
a681c431fb
fix: sanitize workspace API envelopes
2026-08-09 20:38:54 +02:00
marcopan
80aa989523
docs: define workspace evidence registry contract
2026-08-09 20:37:22 +02:00
marcopan
a580c4ca8a
fix: preserve workspace evidence in browser drafts
2026-08-09 20:27:20 +02:00
marcopan
ba7596c2dd
fix: tighten evidence artifact guarantees
2026-08-09 20:12:42 +02:00
marcopan
212c973e3b
feat: preserve evidence in workspace artifacts
2026-08-09 20:03:28 +02:00
marcopan
64b778ade9
test: strengthen evidence runtime handoff coverage
2026-08-09 19:46:47 +02:00
marcopan
36fbd58277
feat: render revision-bound evidence configuration
2026-08-09 19:39:03 +02:00
marcopan
3b9681a63a
fix: harden evidence secret file handoff
2026-08-09 19:27:52 +02:00
marcopan
e50aad7e41
fix: require signed evidence provenance
2026-08-09 19:17:54 +02:00
marcopan
df8dc1e219
fix: close evidence credential disclosure gaps
2026-08-09 19:15:00 +02:00
marcopan
7126b567b0
feat: bind evidence credentials through local files
2026-08-09 19:03:36 +02:00
marcopan
c7a369f436
fix: preserve evidence revision staleness semantics
2026-08-09 18:45:56 +02:00
marcopan
266a604892
fix: distinguish evidence tree lookup failures
2026-08-09 18:40:37 +02:00
marcopan
521288eb04
feat: bind evidence trees to registry revisions
2026-08-09 18:39:11 +02:00
marcopan
033809b1b6
fix: harden evidence URI validation
2026-08-09 18:24:14 +02:00
marcopan